> To be exhaustive, the only exception is in the OUTPUT chain on kernel > versions less than 2.6.11, when DNAT changes the output interface the > source address is also changed in order to match the new interface. > However DNAT in the PREROUTING chain never changes the source address. This is on RHEL 4, which runs some variation of 2.6.9... John -- John Madden Sr. UNIX Systems Engineer Ivy Tech Community College of Indiana jmadden@xxxxxxxxxxx - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html